Privacy Policy

Below we would like to draw your attention to the processing of personal data carried out by [EMMI UK LIMITED]. Please read our privacy policy carefully. If you have any questions or comments about this privacy policy, you can always address them to [our data protection officer] to the email address given in section 1.

1. Name and contact details of the controller and the company data protection officer

This privacy policy applies to the processing of personal data by:
Responsible:

EMMI UK
111 Upper Richmond Road Putney SW15 2TJ

Email: info.uk@emmi.com

Telephone: 0080 0090 00100

The company data protection officer of Emmi UK is reachable at dataprotection.uk@emmi.com

2. Collection and storage of personal data as well as the nature and purpose of their use

a) When visiting the website

When you visit our website www.onken.com, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information will be collected by us without your intervention and automatically deleted after two years:

IP address of the requesting terminal,
Date and Time of access,
Name and URL of the retrieved file,
Website from which access is made (so-called referrer URL),
Device type and operating system of your device,
Name of your access provider
Browser type and version used, and other information provided by the browser (such as geographical origin, language setting, add-ons used, screen resolution, etc.).

The above data will be processed by us for the following purposes:

Ensuring a smooth connection of the website,
Ensuring the best possible use of our website,
Evaluation of system security and stability as well
For further administrative purposes.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f of the EU General Data Protection Regulation (GDPR). Our legitimate interest follows from the data collection purposes listed above. In no case we use the data so collected for the purpose to draw conclusions on their person.

In addition, we use cookies and analysis services when visiting our website. Further details can be found in sections 4, 6 and 7 of this privacy policy.

b) By using our contact form

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid e-mail address, first and last name, postal code and telephone number to let us know who the request came from and to answer it. Further information can be provided voluntarily.

The data processing for the purpose of contacting us is in accordance with Art. 6 para. 1 p. 1 lit. a GDPR based on your voluntarily granted consent.

The personal data collected by us for the use of the contact form will be automatically deleted after completion, no later than 52 weeks after the request you have made.

c) Prize promotions

From time to time we may hold sweepstakes or similar promotions. For the purpose of conducting the lotteries or promotions we use the following information:

Salutation, last name, first name
Address
Date of birth
Photos and videos
Social Media Handles

This information will be deleted after the competition, or action. Something different applies if, in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR have expressly and separately consented to the use of the aforementioned and possibly further personal data for marketing purposes (emails, newsletters, etc.) or other purposes. In the context of the raffle or the campaigns, we will only pass on your personal data to third parties for their own purposes if, in accordance with Art. 6 para. 1 sent. 1 lit. a GDPR have expressly consented or this for the performance of the competition according to Art. 6 para. 1 sentence 1 lit. b GDPR is required.

d) Further purposes

We reserve the right to process your personal data for further purposes. However, we will inform you accordingly and, if necessary, seek your consent.

3. Disclosure of data

a) SAP Hybris

We use the cloud-based licensed software Hybris Marketing of SAP America Inc. on our site (3999 West Chester Pike, Newtown Square, PA 19073 USA). The SAP Hybris Marketing Cloud System is located in St. Leon-Rot in Germany.

With Hybris Marketing, the personal data that you provide us with in accordance with this privacy policy and your personal data collected by us is transmitted on a central server of SAP America Inc. in Germany and brought together in a uniform consumer profile. This serves the purpose of carrying out the possibilities of context-based marketing measures. This enables us to provide consumers and anonymous website visitors with a consistent and relevant real-time digital user experience. About Hybris Marketing, we want to make sure that only your actual or supposedly interests-oriented products and advertisements are displayed on your devices.

The use of the SAP Hybris Marketing Cloud System is based on Art. 6 para. 1 sentence 1 lit. f GDPR for the above purposes. These interests are to be regarded as justified within the meaning of the aforementioned provision.

b) For other purposes

In addition, we only pass on your personal data within the Emmi Group and / or to third parties if:

You yours according to Art. 6 para. 1 sentence 1 lit. a GDPR have given express consent to this
This according to Art. 6 para. 1 sentence 1 lit. b GDPR permitted by law and required for the execution of contractual relationships with you,
In the event that disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR there is a legal obligation as well
Disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data.

4. Cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site.

In the cookie information is stored, each resulting in connection with the specific terminal used. However, this does not mean that we are immediately aware of your identity.

On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our page.

In addition, to improve usability, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our site again to take advantage of our services, it will automatically recognize that you have already been with us and what inputs and settings you have made, so you do not have to re-enter them.
On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer (see paragraph 6) and to make you offers that meet your personal interests (see paragraph 7).

Insofar as the aforementioned cookies are personal data, they are used on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Our interest in the mentioned purposes, in particular in the optimization of our website, is considered as justified in the sense of the aforementioned provision.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or always a hint appears before a new cookie is created. However, disabling cookies completely may mean that you can not use all features of our website.

5. Monitoring Tools

a) Brandwatch

We use the services of Brandwatch GmbH (Gutenbergstrasse 77A, 70197 Stuttgart). This is a social media monitoring tool that allows us to identify and monitor content on third party sites (e.g., posts, tweets, blogs, news, forum posts, and social media platforms). This gives us a detailed insight into customer opinions and any topics on the Internet that mention our company name (s) or talk about our brand (s). In doing so, so-called “crawlers” search online available sources to filter out the relevant hits. Brandwatch searches both publicly available data from the Internet and closed-loop third-party networks with which direct contracts are made to access their data.
The data Brandwatch collects varies depending on the source of the data. The following personal data may also be collected:

Your name, username, nickname or other identifier
The contents of the data you have posted about that name, username, nickname, or other identifier, including comments, phrases, opinions, posts, etc
Your profile picture
Your job title or industry
Your interests
Your location
Your gender and
Any other information that you post on any Internet site or on any third party platform that provides Brandwatch with data.

The use of Brandwatch serves the purpose of market and opinion research and is also used by us for marketing and PR purposes. Data processing is external and separate from our corporate web and social media site, so we can not comment on the legality of the processing by Brandwatch.

If you object to the use of your information by Brandwatch, or request information about the data stored, or if you wish to assert any other right you are entitled to, please contact Brandwatch at privacy@brandwatch.com. For more information on privacy at Brandwatch, please click here.

b) Falcon.io

How to use the services of Falcon.io ApS (H.C. Andersens boulevard 27, 1st floor, 1553 Copenhagen V, Denmark). This is a social media management tool that allows us to consistently manage our social media profiles and activities. Each user interaction with us is automatically and individually tracked so we can respond to customer requests quickly and efficiently. In addition, we can filter out whether our company or our products, in the social media platforms we represent, are mentioned, and specifically contact these users or reach them with content. This gives us a detailed insight into customer opinions. Furthermore, the tool also allows us to create our own campaigns

Show personalized and interest-based advertising and measure results.
The use of Falcon.io serves the purpose mentioned above. Data processing is external and detached from our corporate web and social media pages, so we can not comment on the legality of processing by Falcon.io.

If you object to the use of your data by Falcon.io, request information about the stored data or assert any other right to which you are entitled, please contact Falcon.io at the privacy@falcon.io e-mail address. More information about privacy at Falcon.io can be found here.

6. Tracking Tools

The tracking measures listed below and used by us are based on Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures to be used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as justified within the meaning of the aforementioned provision.

a) Google Analytics

For the purpose of customizing and continually optimizing our pages, we use Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, hereinafter “Google”). In this context, pseudonymised usage profiles are created and cookies (see under 4) are used. The information generated by the cookie about your use of this website such as

Browser type / version,
Used operating system,
Referrer URL (the previously visited page),
Host name of the accessing terminal (IP address),
Time of server request

Are transmitted to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for market research and needs-based design of these websites. This information may also be transferred to third parties if required by law or if third parties process this data in the order. Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymized, so that an assignment is not possible (IP masking). Google complies with the US-EU Privacy and US-Swiss Safe Harbor Agreements and is registered with the US Department of Commerce’s Safe Harbor Programs.

You can prevent the installation of cookies by setting the browser software accordingly; however, we point out that in this case not all features of this website may be fully exploited.

In addition, you may prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on.

As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set that will prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

For more information about privacy related to Google Analytics, see the Google Analytics Help Center.

b) Google Adwords Conversion Tracking

In order to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer, we also use Google conversion tracking. Google Adwords will set a cookie (see point 4) on your device if you have reached our website via a Google ad.

These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer’s website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.

Every Adwords customer receives a different cookie. Cookies cannot be tracked via the websites of Adwords customers. The information gathered using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers hear the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.

If you do not want to participate in the tracking process, you can also refuse the required setting of a cookie – for example, via a browser setting that generally disables the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”. Google’s privacy policy for conversion tracking can be found here.

7. Targeting Tools

The targeting measures listed below and used by us are based on Art. 6 para. 1 sentence 1 lit. f GDPR. Through the targeting measures we use, we want to make sure that only your actual or alleged interests-oriented advertising is displayed on your devices. These interests are to be regarded as justified within the meaning of the aforementioned provision.

a) Google Adwords Remarketing

We use Google Remarketing Tags. These are the services of Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereafter “Google”). Google uses cookies (see section 4) that are stored on your computer and that enable you to analyze the use of the website by you. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. The IP address is then shortened by Google for the last three digits, a clear assignment of the IP address is therefore no longer possible. Google complies with the US-EU and US-Swiss Safe Harbor Privacy Policies and is registered with the US Department of Commerce’s equivalent Safe Harbor programs. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage.

Google may also transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google. Third parties, including Google, place ads on websites on the Internet. Third parties, including Google, use stored cookies to serve ads based on previous visits by a user to this site. Google will never associate your IP address with other Google data. The data collection and storage can be contradicted at any time with effect for the future. You can disable the use of cookies by Google by visiting the page to disable Google advertising.

We point out, however, that you may not be able to use all the features of this website in this case. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. For more information about Google’s terms, click here.

b) Double Click

On our website, information for the optimization of advertising impressions is collected and evaluated using cookies (see section 4). For this purpose, we use Google Inc. targeting technologies (Double Click, Double Click Exchange Buyer, Double Click Bid Manager). These technologies enable us to target you with individual interest-based advertising. The cookies used, for example, provide information about which of our products you are interested in. On the basis of the information, we can also display offers on the part of third parties that are specifically oriented towards your interests, as they result from your previous user behavior. The collection and evaluation of your user behavior is exclusively pseudonymous and does not enable us to identify you. In particular, the information is not merged with personally identifiable information about you.

The cookie will be automatically deleted after 30 days.

You can also set preferences for showing interest-based advertising through the Google Ads Settings Manager.

For more information and privacy policy regarding advertising and Google, see the Google Privacy Policy and Terms of Use.

c) Facebook Retargeting / Remarketing

Our pages include remarketing tags from the Facebook social network, 1601 South California Ave., Palo Alto, CA 94304, USA (“Facebook”). When you visit our pages, the remarketing tags make a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. As a result, Facebook can assign the visit to our pages to your user account. We can use this information for the display of Facebook Ads. Facebook complies with the US-EU and US-Swiss Safe Harbor Privacy Policy and is registered with the US Department of Commerce’s Safe Harbor Programs.

We point out that we as the provider of the pages are not aware of the content of the data transmitted and their use by Facebook.

For more information, see the Facebook privacy statement.

d) Facebook Custom Audiences and Lookalike Audiences

In addition, we also use Facebook Custom Audiences and Facebook Lookalike Audiences. These are marketing services from Facebook. These allow us to display personalized and interest-based advertising on Facebook for certain groups of visitors to our website who also use Facebook.

Facebook Custom Audience and Facebook Lookalike Audiences pixels are integrated into our website. This is Java Script code that stores personally identifiable information about your use of the Site. These include your IP address, the browser you are using, and the source and destination pages. This information is transmitted to Facebook servers in the United States. There is an automatic comparison of whether you have saved a Facebook cookie. The Facebook cookie automatically determines whether you belong to the relevant target group for us. If you belong to the target group, we will show you relevant ads on Facebook. In this process, we are not personally identified by matching the data with us. Facebook complies with the US-EU and US-Swiss Safe Harbor Privacy Policy and is registered with the US Department of Commerce’s Safe Harbor Programs.

You may object to the use of the Custom Audiences and Lookalike Audiences services on the Facebook website. After logging in to your Facebook account, you will be taken to the settings for Facebook ads.

For more information on privacy on Facebook, see the privacy policy of Facebook.

8. Your rights

You have the right:

According to Art. 7 para. 3 GDPR, to revoke your once given consent to us at any time. As a result, we are not allowed to continue the data processing based on this consent for the future;
In accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can provide information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification, deletion, limitation of processing or opposition, the existence of the right to complain, the source of their data, if not collected from us, and the existence of automated decision-making including profiling and, where appropriate, meaningful information about their details;
Immediately request the correction of incorrect or completed personal data stored by us;
Request the deletion of your personal data held by us, unless the processing is required to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
To demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you to enforce, exercise or defend legal claims require or you have objected to the processing;In accordance with Art. 20 GDPR, to receive your personal data provided to us in a structured, standard and machine-readable format or to request the transfer to another person in charge.
To complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

9. Right to

If your personal data are based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR are processed, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of objection, which is implemented by us without specifying any particular situation.
If you would like to exercise your right of objection, please send an e-mail to dataprotection.uk@emmi.com

10. Data security

We use the widely used Transport Layer Security (TSL) technology on our website in conjunction with the highest level of encryption supported by your browser. In general, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we’ll use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed representation of the key or lock symbol in the lower status bar of your browser.

We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

11. Updating and changing this privacy policy

This data protection information is currently valid and has the status of December 2017.

Due to the further development of our website and offers thereof or due to changed legal or regulatory requirements, it may be necessary to change this privacy policy.